The SA agent dereferences through OopHandles with the assumption that OopHandle::_obj is at offset 0. It also doesn't apply required load barriers for ZGC.